Changelog

Fix

• — Rhino undo history (#16) — nested agent undo records broke Rhino's undo stack. Per-script RecordDocumentUndo is now disabled during agent turns so the single RhinoAgentTransaction owns the undo record, and Cancel no longer calls doc.Undo() (which could wipe unrelated user edits).

Security

• — Compare the ZMQ auth token in constant time.
• — Restrict the connection-profile token file to owner-only (0600).
• — Sanitize the view name interpolated into Rhino macros.
• — Stop leaking stack traces to the wire.

Reliability

• — Dispose the JobQueue signal and stop fire-and-forget shutdown waits.
• — Widen formatMetadata to accept null.
• — Tighten plugin visibility (public → internal).

CI / build

• — Add a GitHub Actions workflow for TypeScript typecheck and tests.
• — Bump to pnpm 11.5.3 / Node 22, disable credential persistence in checkout.
• — Drop an unused roslyn-language-server.linux-arm64 dependency.

Added

• — rh_capture_view — capture a Rhino viewport screenshot as PNG visual context for visual QA, composition, visibility, and display checks. Permission-gated: only active after you allow Rhino viewport screenshots for the session, and only on models that accept image input.
• — rh_view_control — drive the viewport: switch active / standard / named / CPlane views, set the camera (location, target, lens length, projection), zoom (extents / selected / bounding box), and save named views.
• — New per-session viewport-capture consent flow so screenshots are opt-in.

Added

• — ask_user — ask the user a free-text clarifying question and wait for an answer when requirements are ambiguous.
• — pick_option — present 2–6 informed options to pick from (e.g. resolving ambiguous component matches after gh_list_components). An "Other" choice is appended automatically.

Fixes

• — Silent failures on certain operations.
• — Long GUIDs leaking into output.
• — License corrections.